There is a general belief that cyber attacks on the United States are increasing, as indicated by the 30% increase in cyber-attack related news from 2014 to 2015. During the same time frame, however, the USA government enacted several policy measures meant to reduce or mitigate cyber-attacks. These recent developments have lead us to ask two questions, a) Have cyber-attacks on the United States actually increased, as perceived in the news media? b) What is the impact of changes in US cyber-policy on this trend in cyber-attacks? Our initial investigation reveals that in contrast to the perception, there has been a drop in the number of DDoS cyber-attacks on the USA. In this research, we compare the perceptions and the reality of cyber attacks by considering recent trends in cyber-related news and cyber-attacks (specifically DDoS type attacks). The analysis makes three important contributions: a) Using GDelt data, we show that from 2014 to 2015 the amount of news referring to cyber events have increased, but the sentiment expressed in such news has become more negative. b) Using DDoS-attacks data shared by Arbor Network, we show that from 2014 to 2016, there has been a marked decrease in the number of cyber-attacks on the USA. c) Using a time series intervention analysis, we show that the decline in cyber-attacks appears to be related to the changes in US cyber policy. In particular, the US President's authorization to prosecute malicious cyber actors significantly decreased the DDoS-attacks on the US.
[1]
G. O'Hara,et al.
Cyber-Espionage: A Growing Threat to the American Economy
,
2010
.
[2]
Steven L. Scott,et al.
Inferring causal impact using Bayesian structural time-series models
,
2015,
1506.00356.
[3]
Peter Reiher,et al.
A taxonomy of DDoS attack and DDoS defense mechanisms
,
2004,
CCRV.
[4]
H. Lipson.
Tracking and Tracing Cyber-Attacks: Technical Challenges and Global Policy Issues
,
2002
.
[5]
Kathleen M. Carley,et al.
DDoS cyber-attacks network: Who's attacking whom
,
2016,
2016 IEEE Conference on Intelligence and Security Informatics (ISI).
[6]
Walter Enders,et al.
The Effectiveness of Antiterrorism Policies: A Vector-Autoregression-Intervention Analysis
,
1993,
American Political Science Review.
[7]
Robin A. Gandhi,et al.
Dimensions of Cyber-Attacks: Cultural, Social, Economic, and Political
,
2011,
IEEE Technology and Society Magazine.
[8]
George E. P. Box,et al.
Intervention Analysis with Applications to Economic and Environmental Problems
,
1975
.
[9]
Scott J. Shackelford.
From Nuclear War to Net War: Analogizing Cyber Attacks in International Law
,
2009
.
[10]
Rain Ottis,et al.
Analysis of the 2007 Cyber Attacks Against Estonia from the Information Warfare Perspective
,
2008
.
[11]
James Andrew Lewis,et al.
The economic impact of cybercrime and cyber espionage
,
2013
.